Description (CNA)
The VSCode extension for Spring CLI are vulnerable to command injection, resulting in command execution on the users machine.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Spring / CLI VSCode Extension | affected 0.9.0 and older |
CWE
CWE-78
References
ADP enrichment
No English description supplied.
No references supplied.